package daecommon

import (
	"fmt"
	"isle/garage"
	"isle/nebula"
	"isle/secrets"
)

const (
	secretsNSNebula = "nebula"
	secretsNSGarage = "garage"
)

////////////////////////////////////////////////////////////////////////////////
// Nebula-related secrets

// IDs and Get/Set functions for nebula-related secrets.
var (
	NebulaCASigningPrivateKeySecretID = secrets.NewID(secretsNSNebula, "ca-signing-private-key")

	GetNebulaCASigningPrivateKey, SetNebulaCASigningPrivateKey = secrets.GetSetFunctions[nebula.SigningPrivateKey](
		NebulaCASigningPrivateKeySecretID,
	)
)

////////////////////////////////////////////////////////////////////////////////
// Garage-related secrets

func garageS3APIBucketCredentialsSecretID(credsName string) secrets.ID {
	return secrets.NewID(
		secretsNSGarage, fmt.Sprintf("s3-api-bucket-credentials-%s", credsName),
	)
}

// IDs and Get/Set functions for garage-related secrets.
var (
	GarageRPCSecretSecretID                    = secrets.NewID(secretsNSGarage, "rpc-secret")
	GarageS3APIGlobalBucketCredentialsSecretID = garageS3APIBucketCredentialsSecretID(
		garage.GlobalBucketS3APICredentialsName,
	)

	GetGarageRPCSecret, SetGarageRPCSecret = secrets.GetSetFunctions[string](
		GarageRPCSecretSecretID,
	)

	GetGarageS3APIGlobalBucketCredentials,
	SetGarageS3APIGlobalBucketCredentials = secrets.GetSetFunctions[garage.S3APICredentials](
		GarageS3APIGlobalBucketCredentialsSecretID,
	)
)